Windows 10: Computer Fraud - Cyber Crime

David-eng · Oct 11, 2019

I received an email from a scammer demanding money to be paid into an account, if I did not they would access my accounts. Like always I tagged it as a spam and blocked all future emails. It wasn't until I was about to delete that I realised that they displayed my password.

Several of my accounts had been accessed. My email had been redirected.

Today I have tried top access my Microsoft account to be told that my password had been changed two months ago!

I have regained access to my account but I need to have evidence that the account has been accessed by someone else. I was directed from the telephone Microsoft support supervisor to request information through this process.

Therefore I need the dates my account was accessed, the location (ISP address), any new email account and all activity available.

I look forward to your prompt response

David

:)

Brink · Oct 11, 2019

FBI warns hacked IoT devices used for malicious cyber activities

Cyber actors actively search for and compromise vulnerable Internet of Things (IoT) devices for use as proxies or intermediaries for Internet requests to route malicious traffic for cyber-attacks and computer network exploitation. IoT devices, sometimes referred to as “smart” devices, are devices that communicate with the Internet to send or receive data. Examples of targeted IoT devices include: routers, wireless radios links, time clocks, audio/video streaming devices, Raspberry Pis, IP cameras, DVRs, satellite antenna equipment, smart garage door openers, and network attached storage devices.

IoT proxy servers are attractive to malicious cyber actors because they provide a layer of anonymity by transmitting all Internet requests through the victim device’s IP address. Devices in developed nations are particularly attractive targets because they allow access to many business websites that block traffic from suspicious or foreign IP addresses. Cyber actors use the compromised device’s IP address to engage in intrusion activities, making it difficult to filter regular traffic from malicious traffic.

Cyber actors are using compromised IoT devices as proxies to:

Send spam e-mails;

Maintain anonymity;

Obfuscate network traffic;

Mask Internet browsing;

Generate click-fraud activities;

Buy, sell, and trade illegal images and goods;

Conduct credential stuffing attacks, which occurs when cyber actors use an automated script to test stolen passwords from other data breach incidents on unrelated web-sites; AND

Sell or lease IoT botnets to other cyber actors for financial gain.

Cyber actors typically compromise devices with weak authentication, unpatched firmware or other software vulnerabilities, or employ brute force attacks on devices with default usernames and passwords.

Compromised devices may be difficult to detect but some potential indicators include:

A major spike in monthly Internet usage;

A larger than usual Internet bill;

Devices become slow or inoperable;

Unusual outgoing Domain Name Service queries and outgoing traffic; or

Home or business Internet connections running slow.

Protection and Defense

Reboot devices regularly, as most malware is stored in memory and removed upon a device reboot. It is important to do this regularly as many actors compete for the same pool of devices and use automated scripts to identify vulnerabilities and infect devices.

Change default usernames and passwords.

Use anti-virus regularly and ensure it is up to date.

Ensure all IoT devices are up to date and security patches are incorporated.

Configure network firewalls to block traffic from unauthorized IP addresses and disable port forwarding.

Isolate IoT devices from other network connections.

Additional Resources

For additional information on cyber threats to IoT devices, please refer to “Common Internet of Things Devices May Expose Consumers to Cyber Exploitation,” available at https://www.ic3.gov/media/2017/171017-1.aspx.

Victim Reporting

If you suspect your IoT device(s) may have been compromised, contact your local FBI office and/or file a complaint with the Internet Crime Complaint Center at www.ic3.gov.
Click to expand...

Source: Internet Crime Complaint Center (IC3) | Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities

Brink · Oct 11, 2019

FBI warns hacked IoT devices used for malicious cyber activities

Cyber actors actively search for and compromise vulnerable Internet of Things (IoT) devices for use as proxies or intermediaries for Internet requests to route malicious traffic for cyber-attacks and computer network exploitation. IoT devices, sometimes referred to as “smart” devices, are devices that communicate with the Internet to send or receive data. Examples of targeted IoT devices include: routers, wireless radios links, time clocks, audio/video streaming devices, Raspberry Pis, IP cameras, DVRs, satellite antenna equipment, smart garage door openers, and network attached storage devices.

IoT proxy servers are attractive to malicious cyber actors because they provide a layer of anonymity by transmitting all Internet requests through the victim device’s IP address. Devices in developed nations are particularly attractive targets because they allow access to many business websites that block traffic from suspicious or foreign IP addresses. Cyber actors use the compromised device’s IP address to engage in intrusion activities, making it difficult to filter regular traffic from malicious traffic.

Cyber actors are using compromised IoT devices as proxies to:

Send spam e-mails;

Maintain anonymity;

Obfuscate network traffic;

Mask Internet browsing;

Generate click-fraud activities;

Buy, sell, and trade illegal images and goods;

Conduct credential stuffing attacks, which occurs when cyber actors use an automated script to test stolen passwords from other data breach incidents on unrelated web-sites; AND

Sell or lease IoT botnets to other cyber actors for financial gain.

Cyber actors typically compromise devices with weak authentication, unpatched firmware or other software vulnerabilities, or employ brute force attacks on devices with default usernames and passwords.

Compromised devices may be difficult to detect but some potential indicators include:

A major spike in monthly Internet usage;

A larger than usual Internet bill;

Devices become slow or inoperable;

Unusual outgoing Domain Name Service queries and outgoing traffic; or

Home or business Internet connections running slow.

Protection and Defense

Reboot devices regularly, as most malware is stored in memory and removed upon a device reboot. It is important to do this regularly as many actors compete for the same pool of devices and use automated scripts to identify vulnerabilities and infect devices.

Change default usernames and passwords.

Use anti-virus regularly and ensure it is up to date.

Ensure all IoT devices are up to date and security patches are incorporated.

Configure network firewalls to block traffic from unauthorized IP addresses and disable port forwarding.

Isolate IoT devices from other network connections.

Additional Resources

For additional information on cyber threats to IoT devices, please refer to “Common Internet of Things Devices May Expose Consumers to Cyber Exploitation,” available at Internet Crime Complaint Center (IC3) | Common Internet of Things Devices May Expose Consumers to Cyber Exploitation.

Victim Reporting

If you suspect your IoT device(s) may have been compromised, contact your local FBI office and/or file a complaint with the Internet Crime Complaint Center at www.ic3.gov.
Click to expand...

Source: Internet Crime Complaint Center (IC3) | Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities

Todd Anthony · Oct 11, 2019

Computer fraud

I've been following up with the problem and so far it looks like it originated elsewhere and not on my computer. Of the two separate fraud charges I've researched one and spoke with the company that was attempted with the fraud and they are a UK company
and the charges were online using a VPN, they flagged it and it never went through. They believe based on their best guess (and experience) that the charge came from China.

The other charge was made to a Pennsylvania cosmetics retailer and it went through, actually more than once, and the products were shipped to an address. I've spoken with the cosmetics retailer over the phone and they won't share any details for security
purposes but I've contacted various authorities and I'm waiting to see what they learn based on the information I gave them. I find it interesting that the UK charges were flagged but the cosmetics ones were not. Hmm? Hopefully the authorities can give me
some info regarding what name and address and card info was used for that purchase. If the purchase occurred without all the correct info then that says something right there about that cosmetics company anyway. So I'll wait and see.

This next part is likely a long, long shot but almost the same time this fraud on my credit card occurred I also began receiving aggressive fraud spam, and also at this time I was dealing with a California business whom I purchased a product from online
(not with the card that later was breached, in fact paid with PayPal) and later they refuse to honor their warranty claim when the part turned out to be bad. I researched the company and they use a fake name and have another business name with two people's
names listed as the owners and at least one appears to be Chinese, the other I'm not sure about. I was pressing them to honor their warranty and tenaciously following up with them and they may be upset with that and possibly are retaliating with the fraud
spam and card breach? As I said it may be a long shot but it seems peculiar that at that same time I'm dealing with this company (unsatisfactorily) I also start getting aggressive fraud spam and then one of my cards is breached. I'm guessing most or all of
the auto parts this California company sells online are from China, and it wouldn't surprise me if the company is Chinese and is based in China with an office and retail outlet in California. They also appear to have the same office and retail outlet in Australia.

We'll see what the authorities get back to me with. Any thoughts from you Rob?

Windows 10: Computer Fraud - Cyber Crime

Computer Fraud - Cyber Crime

Computer Fraud - Cyber Crime

Computer Fraud - Cyber Crime

Computer Fraud - Cyber Crime - Similar Threads - Computer Fraud Cyber

Cyber Crime phone calls, how to contact a person in Microsoft?

Cyber Crime phone calls, how to contact a person in Microsoft?

Cyber Crime phone calls, how to contact a person in Microsoft?

I received a call from someone claiming to be from Microsoft Cyber Crime department, is...

I received a call from someone claiming to be from Microsoft Cyber Crime department, is...

I received a call from someone claiming to be from Microsoft Cyber Crime department, is...

Microsoft Cyber Crime Team Pop-up?

How can I investigate fraud and cyber security hacking on my device and home internet

malware and cyber crime